openssl genrsa -out mydomain.key 2048

openssl req -new -key mydomain.key -out mydomain.csr

openssl x509 -req -days 3650 -in mydomain.csr -signkey mydomain.key -out mydomain.crt

[req]
default_bits       = 2048
distinguished_name = req_distinguished_name
req_extensions     = req_ext
prompt             = no

[req_distinguished_name]
C  = CN
ST = SH
L  = Shanghai
O  = YIQISOFT
OU = Tech 
CN = harbor.yiqisoft.cn

[req_ext]
subjectAltName = @alt_names

[alt_names]
DNS.1 = harbor.yiqisoft.cn

openssl req -x509 -nodes -days 3650 -newkey rsa:2048 -keyout mydomain.key -out mydomain.crt -config openssl.cnf